https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:06:14 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-05036 bdu:2020-05036 https://cve.radiocsirt.org/vuln/bdu:2020-05036 https://cve.radiocsirt.org/vuln/cnvd-2020-21081 cnvd-2020-21081 https://cve.radiocsirt.org/vuln/cnvd-2020-21081 https://cve.radiocsirt.org/vuln/euvd-2026-35718 EUVD-2026-35718 https://cve.radiocsirt.org/vuln/euvd-2026-35718 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1953 <p>Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML file was loaded from an untrusted source, it could therefore load and execute code out of the control of the host application.</p> <p>Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML file was loaded from an untrusted source, it could therefore load and execute code out of the control of the host application.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-1953 https://cve.radiocsirt.org/vuln/ghsa-7qx4-pp76-vrqh <p><strong>Affected:</strong> Maven: org.apache.commons:commons-configuration2</p> <p>Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML file was loaded from an untrusted source, it could therefore load and execute code out of the control of the host application.</p> <p><strong>Affected:</strong> Maven: org.apache.commons:commons-configuration2</p> <p>Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML file was loaded from an untrusted source, it could therefore load and execute code out of the control of the host application.</p> https://cve.radiocsirt.org/vuln/ghsa-7qx4-pp76-vrqh https://cve.radiocsirt.org/vuln/gsd-2020-1953 gsd-2020-1953 https://cve.radiocsirt.org/vuln/gsd-2020-1953 https://cve.radiocsirt.org/vuln/rhsa-2020:2751 <p>apache-commons-configuration: uncontrolled class instantiation when loading YAML files broker: resetUsers operation stores password in plain text netty: compression/decompression codecs don&#39;t enforce limits on buffer allocation sizes</p> <p>apache-commons-configuration: uncontrolled class instantiation when loading YAML files broker: resetUsers operation stores password in plain text netty: compression/decompression codecs don&#39;t enforce limits on buffer allocation sizes</p> https://cve.radiocsirt.org/vuln/rhsa-2020:2751 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1953 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: commons-configuration2, Ubuntu:20.04:LTS: commons-configuration2</p> <p>Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML file was loaded from an untrusted source, it could therefore load and execute code out of the control of the host application.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: commons-configuration2, Ubuntu:20.04:LTS: commons-configuration2</p> <p>Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML file was loaded from an untrusted source, it could therefore load and execute code out of the control of the host application.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1953